Awesome DeepSeek Harness Plugin

Manages local DeepSeek Harness skills in Settings and shows shared Agent skills as read-only.

The desktop app has its own refresh button. Edited a plugin but a run is still going? Refresh. Window sluggish after hours of use? Refresh. One button fixes both — running sessions, queued messages and drafts are untouched.

Preflight for plugin authors: the checks the market runs — root export, dsh.client against exports\["./client"], whether npm pack ships the panel — on any folder or GitHub repo, from a panel or one command; plus release tooling and a Node testkit for client bundles.

Fixes plugins a DSH upgrade left behind: rehearse each rejected plugin in a throwaway home, grant a reversible exact-version exemption when it boots, and refuse when it does not. Also a multi-host compatibility matrix, a public table of every catalogued plugin, and a read-only plugin_health tool.

Adds a /simplify command that asks the agent to simplify code within a selected Git change scope, including staged changes, commits, and untracked files.

fnOS 飞牛 NAS integration for DeepSeek Harness, working through the fnOS browser SDK when the Web UI runs inside an fnOS app frame: follows the NAS theme while DSH is set to system preference, lists and revokes authorized NAS directory grants in Settings, opens files and links in the matching fnOS app, and syncs the DSH page title to the fnOS app window. Install from npm with `dsh plugin --profile web add @tnnevol/dsh-fnos`.

HuaweiCloud DevKit gives AI agents complete command of Huawei Cloud — build, deploy, operate, always governed, always secure.

For DSH plugin AUTHORS: run this after you finish writing a plugin and it audits the entire publish path, then hands you the exact GitHub + npm + market commands. Pre-publish gate for DSH plugins. Turns every silent failure in the publish path into a deterministic check: package.json completeness (missing exports\["."], files omitting lib/ so the tarball is empty, no "type": "module", client declared without a ./client export), UTF-8 BOM, JSON/YAML parse errors, cordis.patch.yml insert rows written at the wrong indent (the bug that makes a plugin install and never mount), insert name mismatches, missing entry exports, require() inside ESM, missing LICENSE or README install line, missing tests, unscoped npm names that return a 403 no granular token can diagnose, versions already on the registry, and missing GitHub repos. Six agent tools; every finding carries its fix. Read-only, no LLM.

Plugin governance: new/updated plugins stage in a candidate area first, then hot-mount after startup — success promotes, failure auto-disables, repeated failures freeze, one-click safe mode, sidebar diagnostics panel (npm: `dsh-my-guardian`).

Read-only runtime management panel for the official DSH MCP client: connection status, registered tools, errors, and reconnect counts through the /mcp command and a Settings tab, with sanitized display and enable/disable patch suggestions.

A governed registry for MCP connectors (stdio and streamable-http): four-level fail-closed authorization, mcpServers JSON import that rejects malformed args, credential redaction at every output boundary, an agent bridge that returns an honest review verdict instead of a fake approval, and a /mcp-reg operator console plus a settings page.

Manages DSH skills and MCP servers from the web settings: skill cards with hot enable/disable, workspace scopes, groups, batch migration and drag-and-drop import, plus stdio/HTTP MCP CRUD with connection tests, secret redaction and the unified dsh-panel CLI.

Undo/redo & rollback system for DSH: every config change is auto-snapshotted; undo/redo/restore to any version from the WebUI or the offline CLI/GUI tools (works even when DSH fails to boot).

Continual self-evolution: versioned, auditable, rollback-safe harness state (prompts, memory, skills, subagent specs) refined from session trajectories, with review gates and hot-reloaded skills.

Compare Git/SVN versions across repositories and export Chinese Markdown release reports with optional approved model analysis.

Diagnoses and repairs DeepSeek Harness on native Windows around the official persistent PowerShell and Workspace Write stack, creates the desktop shortcut, and keeps earlier Git Bash and BusyBox presets behind an explicit legacy setup. No WSL.

Update management for DeepSeek Harness and its plugins: semver-aware dual-source (npm/GitHub) checks for the main program and every installed plugin, a locale-aware banner (zh/en) listing updatable items, one-click updates (the main program is backed up, integrity-checked and rolled back on failure; plugins install via a temp directory without touching other packages), and a watchdog-guarded restart after updating. The settings page adds per-plugin version lamps, live update progress, and banner/notification toggles.

Xray-core supervisor and router for DSH with VLESS import, global/China-direct/whitelist routing, a three-card live panel, and self-update.

Pi Host ABI compatibility engine: after one install, unmodified Pi extensions from npm mount as native DSH plugins with `dsh plugin add <pi-package>`. Verified end to end on stock DSH with pi-mcp-adapter (full MCP manager: OAuth, resources, prompts, MCP Apps, elicitation, sampling), @tintinweb/pi-subagents, pi-code, pi-hermes-memory and pi-background-tasks; `pi2dsh inspect` reports a package's compatibility before installing.

SSH profiles, browser terminals, SFTP browsing, port forwarding, proxies, and session-scoped AI access for DeepSeek Harness.

One-command backup, restore & migration for all DSH user data (~/.dsh) with a visual Settings panel: scheduled auto-backup with tiered retention, sha256 verification, hardened restore with auto-rollback and a result receipt, typed sub-backups (--types), credential redaction into a local vault, private-repo GitHub sync for moving to a new machine, and an out-of-process rescue console (zero-dependency rescue web UI in the backup dir) that works even when the host won't boot. /backup doctor checks and repairs corrupt session logs from a known-good backup and quarantines them before rotation; migrate-check statically predicts which sessions a host upgrade would break (frozen event-list rules, filename/generation mismatch, hardlink support, legacy credentials); the credential sentinel preserves pre-migration copies before the host rewrites them; smart backup snapshots before host upgrades; /backup check-update and /backup update report and install new releases (snapshotting first). Restore handles attachment hard links and arbitrarily large archives (streamed listing). Current npm version 0.13.4; spans DSH 0.1.1-rc.2 through 0.2.0-rc.1, including 0.2.0's install-time peer gate. macOS/Linux/Windows.

Send dsh turn traces, LLM generations, tool spans, and subagent activity to Langfuse.

Preset doctor for agent presets: scans home/profile `cordis.patch.yml` declarations and legacy `.agent-presets/` dirs across host lines 0.1.0→0.2.0, shows every detected preset as an official-style card (source/era badges, broken red border, per-finding details, current DSH version + era catalog), and syncs a preset to the current syntax per-card behind an explicit confirm dialog (.bak backup + atomic write; report-level findings are never written — startup scans are report-only). npm: `dsh-preset-doctor`.

Converts session, agent-loop, LLM, and tool lifecycle events into OpenTelemetry GenAI traces and metrics, exported over standard OTLP/HTTP to any compatible backend, with content capture off by default.